Also, the nix expression you build an image with is deterministic, unlike Dockerfiles, which by-design aren't. (Dockerfiles are not the only way to build imag

Also, the nix expression you build an image with is deterministic, unlike Dockerfiles, which by-design aren't. (Dockerfiles are not the only way to build images, of course, but they are a common one).